Privacy Policy
Last updated: September 2026
01Controller of personal data
The controller of personal data within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) is:
02What data we collect and for what purpose
2.1 E-mail contact
The Website does not operate a contact form. Contact takes place directly by e-mail, and the contact buttons open the User’s e-mail program. The message you send goes straight to the controller’s inbox and contains the data you provide in it yourself: usually your first name, e-mail address, company name and the content of your enquiry. This data is processed in order to respond to the enquiry and present an offer.
- Legal basis: Article 6(1)(b) GDPR (necessary in order to take steps prior to entering into a contract) and Article 6(1)(f) GDPR (legitimate interest of the controller).
- Retention period: until the contact ends or, if cooperation is established, for the duration of the contract and 5 years after its end (tax requirements).
2.2 Automatically collected data
The Website may collect standard server log data (IP address, browser, date and time of visit) for technical and security purposes. This data is not combined with personal data and is deleted after 30 days.
2.3 Project Brief
A Client with whom a contract has been concluded receives an individual link to the Brief form. The form collects the full name of the person completing it, the company name, a contact e-mail address and the content of the answers concerning the project.
Until the “Send brief” button is used, the answers remain solely in the memory of the Client’s browser and are not sent anywhere. The Website does not operate a database and does not store the answers on a server. After submission, the content of the Brief reaches the controller’s inbox and passes through the infrastructure of Resend Inc., which acts as an intermediary in delivering the message.
- Legal basis: Article 6(1)(b) GDPR (necessary for the performance of a contract).
- Retention period: the duration of the project and 5 years after its completion (tax requirements and the limitation period for claims).
- Access: the Brief is secured with an individual key provided only to the Client. Without the key, the page is not accessible and is not indexed by search engines.
03Data recipients
Personal data may be transferred to the following categories of recipients:
- Vercel Inc. hosting provider for the Website; every HTTP request is processed by Vercel’s infrastructure (servers in the EU and the USA, safeguarded by standard contractual clauses approved by the European Commission)
- Resend Inc. provider of the e-mail sending service; the data provided in the project Brief (full name, company name, e-mail address and content of the answers) is transferred via the Resend API solely for the purpose of delivering the message to the controller
Data is not sold or shared with other entities for marketing purposes.
04Transfers of data outside the EEA
Some suppliers of services (Vercel, Resend) may process data outside the European Economic Area. Transfers take place on the basis of standard contractual clauses approved by the European Commission, which ensure an adequate level of data protection.
05Rights of data subjects
Under the GDPR, you have the following rights:
- Right of access you may request information about the data being processed (Article 15 GDPR)
- Right to rectification you may request the correction of inaccurate data (Article 16 GDPR)
- Right to erasure you may request the erasure of data, i.e. the right to be forgotten (Article 17 GDPR)
- Right to restriction of processing you may request the restriction of data processing (Article 18 GDPR)
- Right to data portability you may receive your data in a structured format (Article 20 GDPR)
- Right to object you may object to the processing of data based on legitimate interest (Article 21 GDPR)
To exercise the above rights, get in touch at: rajmund.radtke@gmail.com. I will respond within 30 days.
06Right to lodge a complaint
You have the right to lodge a complaint with the supervisory authority, i.e. the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warszawa, website: uodo.gov.pl.
07Cookies
The Website does not use analytics, advertising or tracking tools and does not set cookies associated with them. There is no Google Analytics, no advertising pixels and no profiling here.
Within the project Brief, two cookies strictly necessary for its operation are used: the first stores the access key so that the Client does not have to enter it on each visit, and the second records that the Brief has been sent so that the form is not sent twice. Both are technical, do not require consent and are not used for tracking.
Answers entered in the Brief are additionally saved in the local storage of the Client’s browser (localStorage) so that they are not lost when the page is refreshed. They can be deleted at any time using the “Clear” button or by clearing the site data in the browser.
08Changes to the Privacy Policy
We reserve the right to amend this Privacy Policy. We will give notice of material changes by updating the date at the top of the document. We encourage you to review its content regularly.
09Contact
For matters concerning the protection of personal data, contact the controller: